Amendments to the Specification 

On page 1, after the title (line 1), please insert the following headings and paragraphs: 
CROSS-REFERENCE TO RELATED APPLICATIONS 
5 This application is the national phase filing, under 35 U.S.C. §371, of International Applica- 
tion No. PCT/DK2004/000692, filed October 8, 2004, the disclosure of which is incorporated 
herein by reference. This Application claims the benefit, under 35 U.S.C. §1 19(e), of US 
Provisional Application No. 60/509,669, filed October 8, 2003, the disclosure of which is in- 
corporated herein by reference. 

10 

FEDERALLY-SPONSORED RESEARCH OR DEVELOPMENT 

Not Applicable 

BACKGROUND OF THE INVENTION 

15 

On page 6, line 19, please replace the heading with the following rewritten heading: 
Invention: SUMMARY OF THE INVENTION 

Please replace the paragraph beginning on page 7, line 23 with the following rewritten para- 
20 graph: 

This invention solves the problem of how to create and negotiate accountability paths for 
anonymous transactions dynamically adapted to context risk profile without creating linkabil- 
ity. An action of an individual is accountable without making multiple actions of individuals 
linkable. No single trusted party is able to link the identity of an individual to an action. Mul- 
25 tiple different principles can be incorporated in the accountability path such as specific ac- 
countability incorporated through limited-show credentials, time locks, milestone verifica- 
tion, Gorialiscd/parallclisod serialized/parallelized trusted party identity escrow etc. [[Manu]] 
Many of these can be built-into tamper-resistant and verifiable hardware eliminating the need 
to trust an organisation or human. 

30 

On page 1 1 , after line 1 1 , please insert the following heading: 

DETAILED DESCRIPTION OF THE INVENTION 
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Please replace the paragraph beginning at page 11, line 13 with the following rewritten para- 
graph: 

Fig. 3 shows the preferred setup for multi-application chip card infrastructure. The Chip Card 
5 (10) is communicating one-time only References to the Card Reader (42) using the commu- 
nication channel (56) over [[an]] a fixednet IP-connection or any compatible open protocol 
such as a wireless channel. The Card Reader provides the connection to the Shop Computer 
(44) or in another embodiment done directly using for instance wireless communication pro- 
tocols. The one-time only Reference is forwarded to the Service Provider (46) together with 

10 instructions encrypted inside the Chip Card. Client connect from his Client base (48) to take 
control of the transaction without revealing his real identity through a mixnet or other ano- 
nymising anonvmizing network (50) or an Identity Provider /pscudonymising pseudonvmiz- 
ing unit (54) through any communication channel (66). Depending on the encrypted instruc- 
tions, the Service Provider (46) can verify anonymous payment or credential mechanisms di- 

1 5 rectly (62) with financial institutions (52), or indirectly acting as a Trusted Party by forward- 
ing chip card encrypted instructions to the Identity Provider (54). 

Please replace the paragraph beginning at page 17, line 1 with the following rewritten para- 
graph: 

20 This line of credit is on a periodically revolving basis transformed into Coins (tokens) using 
Digital Cash Technology, which is limited to show keys according to David Chaum (WO 
0208865) or Stefan Brands OJS5604805Y 

Please replace the paragraph beginning at page 26, line 24, with the following rewritten para- 
25 graph: 

The Chip Card (10) receives standard payment information from the Shop Computer (44) 
through the Card Reader (20). Instead of encrypting and signing the message and then for- 
warding the message directly to the Financial Institution (52), the message is routed through a 
double layer of psoudonymisors pseudonvmizers, making the Identity Provider (54) act as the 
30 Shop towards the Financial Institution (52) independently of the real Shop Id (44). The Chip 
Card (10) creates an encrypted message attached to a one-time only Reference which is then 
forwarded to the Service Provider, who decrypts the message. The message contains informa- 
tion as to the Relationship according to Fig. 4 and an additional encrypted message with at- 
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tached information to forward this message to the Identity Provider (54). The Identity Pro- 
vider carries out the same operation to find an encrypted Chip Card payment message to for- 
ward to the Financial Institution naming the Identity provider the beneficiary of the payment. 



5 Please replace the paragraph beginning at page 80, line 8 with the following rewritten para- 
graph: 

Money loundcring laundering 

It should be [[notes]] noted that in the preferred setup the electronic payment system in this 
invention has a built-in anti -money ■ loundcring laundering scheme in the closed loop mone- 
10 tary-system - money is transferred to/from bank accounts and only entering passing through 
one transaction where taxes etc. can be ensured. 

Please replace the paragraph beginning at page 80, line 14 with the following rewritten para- 
graph: 

1 5 This scheme assumes that cost of transferring money to and from banking accounts is only 
covering the real cost - otherwise the anti-money- lound e ring laundering scheme can be 
abused by banks to create an artificial fee structure with abnormal profits. In such case recir- 
culation of electronic cash should be used to create a free cash flow until abnormal fees have 
been removed from the pricing structures. 
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